Senior Manager - Cyber Crime Security Incidents and Data Analytics

Senior Manager - Cyber Crime Security Incidents and Data Analytics

Roodepoort, Gauteng, South Africa

Want to know more about us? We’ve got you! Please scroll to the end of the section to get to know us better.

Job Description

MTN operates within a complex, evolving ecosystem driven by its transformation from a telco to a technology-driven platform organisation, spanning:

GSM / Telecom Infrastructure

FinTech (Mobile Money and Digital Financial Services)

Digital Infrastructure (Bayobab – fibre, wholesale, APIs and connectivity platforms)

This environment is characterised by:

Increasingly sophisticated cyber threats targeting telecom and financial ecosystems

Growth in API-based integrations and platform interdependencies

Rise of AI-driven automation and associated security risks

Heightened regulatory and reputational expectations

The Internal Audit function must therefore provide forward-looking, threat-informed cyber assurance, ensuring resilience across all platforms while maintaining independence and objectivity.

Improving the internal control environment across the relevant markets.

Assisting the MTN Board and EXCO in protecting the assets, reputation and sustainability of the organisation for MTN to accomplish its objectives.

Organisational Mission: MTN’s vision is to lead digital transformation in Africa, ensuring widespread access to reliable, high-quality broadband services that drive social and economic development.

Organization Values: At MTN we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, every day. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood, and empowered to live an inspired life. Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.

As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us. This is what we want you to experience with us!

Our commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers, and stakeholders with a vision to realise our shared goals.

Our values dubbed, LIVE Y’ello, are the cornerstone of our culture.

Lead with Care

Can-do with Integrity

Collaborate with Agility

Serve with Respect

Act with Inclusion

Responsibilities

The Senior Manager: Cyber Security Assurance & Offensive Security role will be accountable to achieve the following objectives:

Cyber Security Assurance and Audit Leadership

Lead the development and execution of risk-based cyber security audit plans across Group and OpCo environments to provide independent assurance over the adequacy and effectiveness of cyber security controls.

Assess the design, implementation, and operating effectiveness of information security controls across identity and access management, network security, cloud security, application security, API security, and emerging technology environments.

Evaluate the effectiveness of cyber security governance frameworks and challenge management on control weaknesses, risk exposures, and remediation plans.

Integrate threat intelligence, emerging cyber risks, and industry trends into audit planning and execution to maintain a forward-looking assurance approach.

Review security architecture principles and control environments to determine whether they adequately protect critical business assets and support MTN’s risk appetite.

Deliver actionable and risk-based audit insights that enable management to strengthen cyber resilience across the organisation.

Provide oversight of technology audit outcomes across OpCos and support the General Manager: Technology Audit in driving audit consistency, operational effectiveness, and reporting quality.

Lead, coordinate, and where appropriate independently perform offensive security assessments, including red team exercises, adversary simulations, and penetration testing reviews.

Evaluate the effectiveness of security controls by assessing the real-world exploitability of critical vulnerabilities and attack pathways.

Review third-party penetration testing outcomes to validate testing quality, findings, and remediation effectiveness.

Collaborate with cyber security and technology teams to assess defensive capabilities against realistic threat scenarios.

Translate highly technical testing results into business-focused risk insights for Executive Management, Audit Committees, and governance stakeholders.

Ensure offensive security activities contribute meaningfully to risk identification, control improvement, and organisational resilience.

Incident Response, Cyber Resilience and Forensic Assurance

Assess security, governance, ethical use, and operational risks associated with artificial intelligence solutions, intelligent automation platforms, digital agents, and emerging technologies.

Evaluate risks relating to AI-generated content, model integrity, data leakage, algorithmic bias, and governance effectiveness.

Provide assurance on Responsible AI frameworks, lifecycle governance controls, and compliance with applicable regulatory and ethical standards.

Assess cyber security controls embedded within digital transformation programmes and emerging technology initiatives.

Provide independent insights on technology innovation risks to support secure and responsible adoption across the Group.

Platform Business Cyber Risk Oversight

Provide specialist cyber assurance over critical connectivity infrastructure, digital platforms, fintech ecosystems, and customer-facing technology environments.

Assess cyber risks associated with signalling networks, connectivity infrastructure, and technology platforms supporting MTN operations.

Evaluate security controls within mobile money systems, financial technology ecosystems, and digital payment environments.

Review third-party integrations, APIs, and partner connectivity arrangements to ensure appropriate cyber risk management practices are in place.

Assess vulnerabilities that may impact operational continuity, customer trust, business performance, and regulatory compliance.

Audit Execution and Quality Assurance

Provide assurance to management regarding the effectiveness of internal controls over information security, technology operations, digital platforms, and physical technology assets.

Review, guide, and oversee audit teams to ensure audit work is executed in accordance with approved methodology, professional standards, and quality requirements.

Ensure audit observations, recommendations, and risk assessments are appropriately documented, evidenced, and communicated.

Present audit outcomes, risks, and recommendations to the General Manager: Technology Audit, Group Executive: Internal Audit and Forensic Services, and other governance structures.

Ensure all audit engagements are managed and recorded within the approved eGRC platform in accordance with Group Internal Audit methodologies.

Monitor and track management action plans to ensure agreed audit recommendations are implemented within defined timelines.

Maintain compliance with the International Standards for the Professional Practice of Internal Auditing and the IIA Code of Ethics.

Prepare monthly, quarterly, and ad hoc reports that provide visibility of audit progress, risk themes, assurance outcomes, and governance matters.

Advisory and Stakeholder Engagement

Act as a trusted cyber risk and technology assurance advisor to OpCo leadership teams, Group Security, and technology stakeholders.

Influence management decision-making by providing objective assurance and recommendations that strengthen cyber security maturity.

Foster productive relationships with business leaders, technology teams, and governance stakeholders to promote effective risk management.

Support organisational preparedness for evolving threats through proactive engagement and knowledge sharing.

Drive continuous improvement and cost-effective operation of the Technology Audit function through efficiency, innovation, and effective resource utilisation.

Support coordination activities with External Auditors and other assurance providers where required.

Leadership

Lead, coach, and develop a high-performing team by setting clear expectations, measurable KPIs, and continuous feedback to ensure delivery of strategic and operational objectives within work